Slashdot Mirror
Ukrainian Arrested In India For TJX Data Theft
ComputerWorld reports "A Ukrainian national has been arrested in India in connection with the most notorious hacking incident in US history." "Sergey Valeryevich Storchark was one of 11 men charged in August 2008 with hacking into nine US retailers and selling tens of millions of credit card numbers. He was arrested in India earlier this week, according to a spokesman with India's Central Bureau of Investigation (CBI). In a statement, the CBI said they'd arrested Storchark in New Delhi on the night of May 8, as he deplaned from a flight from Goa, for layover before a flight to Turkey. US authorities had asked for his extradition via diplomatic channels. ... 'His extradition and prosecution would have been very unlikely had he reached his final destination of Ukraine,' the CBI said."
Identity fraud-related crimes really hurt. Had my information stolen by someone that worked at the HQ of my bank at the time.
Identity theft is a big problem to deal for the victim. One of my friend took nearly 3 years to clear all the crap these guys pull. These scum bags belong in prison for life.
Epic fail... the Ukraine is basically the world center of Internet crime and it's because nobody ever gets caught there.
Don't shoot them. Just release all their personal details to everyone whose information they stole. Probably at least one of the victims is unstable enough to track the bastard down and exact revenge for the whole group of victims... especially true if we're talking about millions of victims.
I had an incident where somebody ordered an item with my wife's credit card and had it shipped to another address. When we complained that this transaction was not authorized, they took it off my wife's account, but refused to disclose the address the item had been shipped to, citing "privacy" concerns. Hold on -- people are allowed to commit fraud but still retain their "right" to privacy?!? If it's my account, I have a right to disclosure of full details on every transaction! Again, provide full disclosure, and eventually the criminals will attempt to screw over the wrong person -- which is win-win for the rest of us.
I've abandoned my search for truth; now I'm just looking for some useful delusions.
...as he deplaned from a flight...
Who uses that word?! and Is there anyone over the age of 35 that doesn't think of Hervé Villechaize when you hear the word deplane?
No, if they are going to run an unsecured wireless network with access to customer credit card data, they deserved to be made financially responsible for all transactions made using the leaked data. I suspect being responsible for a multi-million dollar write-off might be somewhat limiting to one's career in IT.
I've abandoned my search for truth; now I'm just looking for some useful delusions.
Again, provide full disclosure, and eventually the criminals will attempt to screw over the wrong person -- which is win-win for the rest of us.
The problem with that is that in North America, the company might get sued for criminal negligence if they gave out that info and a vigilante took the law into their own hands and went a little too far with their street justice. The truth is that vigilantism is still taboo here, and with good reason, so these companies have due-diligence policies that they only release said information to the authorities if said authorities choose to proceed with a legal investigation. The fact is that you neither own the credit card number nor the account on the company's server, so you have no legal right to the information. If you have a problem with that, don't use the service.
Yes, it sucks that the credit card companies typically choose to write off small amounts of fraud because the police won't investigate small claims, but as long as the debt is theirs, it's their right. What really needs to be rectified is the credit bureaus that treat easily obtainable information as sufficient to establish an identity and leave the onus on the consumer to rectify errors in their database. We need to put the financial onus on them to maintain correct information in their DB, much like the onus on credit fraud is on the banks/creditors.
Well, maybe enough successful prosecutions will make it easier for those so inclined to restrain themselves. I sure hope so.
That's not attractive nuisance. An attractive nuisance is something that is inviting but dangerous to children, like an unfenced swimming pool or a broken swingset. A pile of gold may be inviting, but it's not dangerous. And attractive nuisance isn't a mitigating factor in charges against the child, it's a charge against the person who left the nuisance where it could do harm to the child.
Stealing others' property is never excused by "they should have locked it up" arguments. Nor is hacking into others' computers.
Shoulda signed up...suckers!
Report the fraud to the police. They will ask a judge, nicely, to look into the "private" data, and then they will arrest, try, convict, and punish the perpetrator.
That is, if it's above the baseline for their enforcement budget for the year, and they don't have something serious to deal with.
But you can only do that if it's still costing you money.
Once the credit-card company comped your account, you no longer had a case, but they did, so it's their concern, not yours.
But watch all your other financial accounts; if your identity really was stolen, and it's not just a case of someone having your credit card number and using it on a website that doesn't actually check any identification, then you might see people opening bank accounts, applying for loans, starting businesses, etc. under your name.
According to ROKSO the folks who run the Canadian Pharmacy run out of the Ukraine. I'd have to say they are the most annoying bastards I've ever seen, at least as far as spammers go. I'm waiting for the day when they get their come upppance. I hope I live to see it.
It's true no man is an island, but if you take a bunch of dead guys and tie 'em together, they make a good raft.
I think I would have asked for the address before reporting it as fraud.
TJX is liable. There's no question of that. But not for an attractive nuisance. Merely for negligence in disclosing valuable information entrusted to them.
Your identity is never stolen. It's as much a misnomer as "piracy".
What usually happens is that private corporations penalise you because they've put you in some set of lame risk databases they use, and it turns out that your entries were filled against your favour as a result of the actions of someone else.
It's your own (plural, every one of you) fault for putting so much trust and reliance on the convenience of the good ol' entry in a database by which your life is made or broken.
Maybe they will imprison him in Hyderabad and force him to work in a call center handling people's personal information! http://news.bbc.co.uk/2/hi/south_asia/8677486.stm
Absolutely agree. Somebody had ordered a $1500 TV on Bestbuy with my credit card. I am always careful, almost paranoid about security and privacy, and even have a paid fraud-alert and id theft monitoring service (which I wonder if it is worth, or even dangerous in itself) on my credit cards. I complained and the bank took it off my account. But the joke is that they wouldn't tell me what the shipping address was (why the fuck not??) and what's worse, even what they are going to do about it. Like what the results of their "investigation" were, and whether anyone was brought to book. The least I would like to know is which merchant caused this leakage of info. Nothing, no info, about how I was defrauded, and what I could've done to avoid the next fraud. Yeah, innocent until found guilty and all that. Sure. But once found guilty, either make the punishment harsh, or at least reveal full details. What I suspect is the banks don't even bother. Their investigation = hush hush, and writing off as a loss.